CVE-2025-3987

Name of the Vulnerable Software and Affected Versions TOTOLINK N150RT version 3.4.0-B20190525

Description A critical issue affects the processing of the file /boafrm/formWsc. The manipulation of the localPin argument leads to command injection. The attack may be initiated remotely.

Recommendations For TOTOLINK N150RT version 3.4.0-B20190525, as a temporary workaround, consider restricting access to the /boafrm/formWsc file and avoid using the localPin argument in the affected endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.